Solutions Architect Professional (Page 44)

A company is hosting an image-processing service on AWS in a VPC.The VPC extends across two Availability Zones.Each Availability Zone contains one public subnet and one private subnet.The service runs on Amazon EC2 instances in the private subnets.An Application Load Balancer in the public subnets is in front of the service.The service needs to communicate with the internet and does so through two NAT gateways.The service uses Amazon S3 for image storage.The EC2 instances retrieve approximately 1 ТВ of data from an S3 bucket each day.The company has promoted the service as highly secure.A solutions architect must reduce cloud expenditures as much as possible without compromising the service’s security posture or increasing the time spent on ongoing operations.Which solution will meet these requirements?Read More →

A company has many AWS accounts and uses AWS Organizations to manage all of them.A solutions architect must implement a solution that the company can use to share a common network across multiple accounts.The company’s infrastructure team has a dedicated infrastructure account that has a VPC.The infrastructure team must use this account to manage the network.Individual accounts cannot have the ability to manage their own networks.However, individual accounts must be able to create AWS resources within subnets.Which combination of actions should the solutions architect perform to meet these requirements? (Choose two.)Read More →

A solutions architect needs to advise a company on how to migrate its on-premises data processing application to the AWS Cloud.Currently, users upload input files through a web portal.The web server then stores the uploaded files on NAS and messages the processing server over a message queue.Each media file can take up to 1 hour to process.The company has determined that the number of media files awaiting processing is significantly higher during business hours, with the number of files rapidly declining after business hours.What is the MOST cost-effective migration recommendation?Read More →

A company’s main intranet page has experienced degraded response times as its user base has increased although there are no reports of users seeing error pages. The application uses Amazon DynamoDB in read-only mode.Amazon DynamoDB latency metrics for successful requests have been in a steady state even during times when users have reported degradation. TheDevelopment team has correlated the issue to ProvisionedThrough put Exceeded exceptions in the application logs when doing Scan and read operations The team also identified an access pattern of steady spikes of read activity on a distributed set of individual data items.The Chief Technology Officer wants to improve the user experience.Which solutions will meet these requirements with the LEAST amount of changes to the application? (Choose two.)Read More →

A company is using Amazon OpenSearch Service to analyze data.The company loads data into an OpenSearch Service cluster with 10 data nodes from an Amazon S3 bucket that uses S3 Standard storage.The data resides in the cluster for 1 month for read-only analysis.After 1 month, the company deletes the index that contains the data from the cluster.For compliance purposes, the company must retain a copy of all input data.The company is concerned about ongoing costs and asks a solutions architect to recommend a new solution.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is launching a web-based application in multiple regions around the world.The application consists of both static content stored in a private AmazonS3 bucket and dynamic content hosted in Amazon ECS containers content behind an Application Load Balancer (ALB).The company requires that the static and dynamic application content be accessible through Amazon CloudFront only.Which combination of steps should a solutions architect recommend to restrict direct content access to CloudFront? (Choose three.)Read More →

A company has 10 accounts that are part of an organization in AWS Organizations.AWS Config is configured in each account.All accounts belong to either the Prod OU or the NonProd OU.The company has set up an Amazon EventBridge rule in each AWS account to notify an Amazon Simple Notification Service (Amazon SNS) topic when an Amazon EC2 security group inbound rule is created with 0.0.0.0/0 as the source.The company’s security team is subscribed to the SNS topic.For all accounts in the NonProd OU, the security team needs to remove the ability to create a security group inbound rule that includes 0.0.0.0/0 as the source.Which solution will meet this requirement with the LEAST operational overhead?Read More →

A company wants to migrate its on-premises data center to the AWS Cloud.This includes thousands of virtualized Linux and Microsoft Windows servers, SAN storage, Java and PHP applications with MYSQL, and Oracle databases.There are many dependent services hosted either in the same data center or externally.The technical documentation is incomplete and outdated.A solutions architect needs to understand the current environment and estimate the cloud resource costs after the migration.Which tools or services should solutions architect use to plan the cloud migration? (Choose three.)Read More →

A company hosts a Git repository in an on-premises data center.The company uses webhooks to invoke functionality that runs in the AWS Cloud.The company hosts the webhook logic on a set of Amazon EC2 instances in an Auto Scaling group that the company set as a target for an Application Load Balancer (ALB).The Git server calls the ALB for the configured webhooks.The company wants to move the solution to a serverless architecture.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company runs an e-commerce platform with front-end and e-commerce tiers.Both tiers run on LAMP stacks with the front-end instances running behind a load balancing appliance that has a virtual offering on AWS.Currently, the Operations team uses SSH to log in to the instances to maintain patches and address other concerns.The platform has recently been the target of multiple attacks, including:✑ A DDoS attack.✑ An SQL injection attack.✑ Several successful dictionary attacks on SSH accounts on the web servers.The company wants to improve the security of the e-commerce platform by migrating to AWS.The company’s Solutions Architects have decided to use the following approach:✑ Code review the existing application and fix any SQL injection issues.✑ Migrate the web application to AWS and leverage the latest AWS Linux AMI to address initial security patching.✑ Install AWS Systems Manager to manage patching and allow the system administrators to run commands on all instances, as needed.allWhat additional steps will addressof the identified attack types while providing high availability and minimizing risk?Read More →